# CWE-226.

Every Advisory and CVE whose sources give the weakness CWE-226, newest first.

## Records, newest first

- [MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data](https://agentprime.io/advisories/CVE-2026-119179.md)
  `CVE-2026-119179` · CVE record: MongoDB Node.js Driver · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-226
- [Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1](https://agentprime.io/advisories/GHSA-654x-cwwv-5j9c.md)
  `GHSA-654x-cwwv-5j9c`, `BIT-pillow-2026-114501`, `CVE-2026-114501`, `PYSEC-2026-4336` · PyPI `pillow`: affected `>=11.2.1, <13.0.0`, fixed in `13.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Memory corruption, CWE-226
- [pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)](https://agentprime.io/advisories/CVE-2026-107315.md)
  `CVE-2026-107315` · CVE record: pgjdbc pgjdbc · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Information disclosure, CWE-226
- [ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate](https://agentprime.io/advisories/GHSA-4q3p-rj5x-xv7p.md)
  `GHSA-4q3p-rj5x-xv7p`, `CVE-2026-106111` · NuGet `SixLabors.ImageSharp`: affected `>=4.0.0, <4.1.2`, fixed in `4.1.2` · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-226
- [devalue: \`stringify\`/\`uneval\` serialize shared memory](https://agentprime.io/advisories/GHSA-j22f-vq7h-c4qm.md)
  `GHSA-j22f-vq7h-c4qm`, `CVE-2026-92708` · npm `devalue`: affected `>=5.1.0, <5.9.3`, fixed in `5.9.3` · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Information disclosure, CWE-226
- [ASUS Armoury Crate: Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver…](https://agentprime.io/advisories/CVE-2026-18023.md)
  `CVE-2026-18023` · CVE record: ASUS Armoury Crate · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-226
- [OpenStack Ironic: In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run…](https://agentprime.io/advisories/CVE-2026-74250.md)
  `CVE-2026-74250` · CVE record: OpenStack Ironic · CVSS 6.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-226
- [libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation](https://agentprime.io/advisories/CVE-2026-47247.md)
  `CVE-2026-47247` · CVE record: strukturag libheif · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, Memory corruption, CWE-226, CWE-682
- [Resource allocation without limits in ASUS System Control Interface v3 and others](https://agentprime.io/advisories/CVE-2026-13585.md)
  `CVE-2026-13585` · CVE record: ASUS System Control Interface v3 and 2 more · CVSS 8.2 High · Not analysed yet · Published 15 Jul 2026 · Tags: Denial of service, CWE-226
- [pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap](https://agentprime.io/advisories/CVE-2026-48984.md)
  `CVE-2026-48984` · CVE record: mcdope pam_usb · CVSS 4.7 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-14, CWE-226
- [silex technology, Inc. SD-330AC: SD-330AC and AMC Manager provided by silex technology…](https://agentprime.io/advisories/CVE-2026-32960.md)
  `CVE-2026-32960` · CVE record: silex technology, Inc. SD-330AC and 1 more · CVSS 7.1 High · Not analysed yet · Published 20 Apr 2026 · Tags: CWE-226
- [Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables](https://agentprime.io/advisories/GHSA-r7p8-xq5m-436c.md)
  `GHSA-r7p8-xq5m-436c`, `CVE-2026-5795` · Maven `org.eclipse.jetty.ee10:jetty-ee10-jaspi` and 4 more: affected `>=12.1.0, <12.1.8 || >=12.0.0, <12.0.34`, fixed in `12.1.8`, `12.0.34` · CVSS 7.4 High · Not analysed yet · Published 14 Apr 2026 · Tags: Authentication bypass, CWE-226
- [Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables](https://agentprime.io/advisories/GHSA-gc59-r5jq-98qw.md)
  `GHSA-gc59-r5jq-98qw` · Maven `org.eclipse.jetty.ee10:jetty-ee10`: affected `>=12.1.0, <12.1.7 || >=12.0.0, <12.0.33 || >=11.0.0, <11.0.28 || >=10.0.0, <10.0.28 || >=9.4.0, <9.4.60`, fixed in `12.1.7`, `12.0.33`, `11.0.28`, `10.0.28`, `9.4.60` · CVSS 7.4 High · Withdrawn · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-226
- [Semtech LR11xx Encrypted Firmware Disclosure](https://agentprime.io/advisories/CVE-2025-14858.md)
  `CVE-2025-14858` · CVE record: Semtech LR1110 and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-226
- [AnyBurn 4.3 x86 Denial of Service via Image Conversion](https://agentprime.io/advisories/CVE-2019-25657.md)
  `CVE-2019-25657` · CVE record: Anyburn AnyBurn x86 · CVSS 6.8 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: CWE-226
- [OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding](https://agentprime.io/advisories/GHSA-9p93-7j67-5pc2.md)
  `GHSA-9p93-7j67-5pc2`, `CVE-2026-34512` · npm `openclaw`: affected `<=2026.3.24`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 27 Mar 2026 · Tags: Broken access control, CWE-226
- [Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()](https://agentprime.io/advisories/GHSA-x6m9-38vm-2xhf.md)
  `GHSA-x6m9-38vm-2xhf`, `CVE-2026-74791` · NuGet `scriban` and 1 more: affected `<7.0.0`, fixed in `7.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-226
- [WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service](https://agentprime.io/advisories/CVE-2019-25645.md)
  `CVE-2019-25645` · CVE record: Winavi WinAVI iPod/3GP/MP4/PSP Converter · CVSS 6.9 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-226
- [Ease Audio Converter 5.30 Denial of Service via Audio Cutter](https://agentprime.io/advisories/CVE-2019-25617.md)
  `CVE-2019-25617` · CVE record: Audiotool Ease Audio Converter · CVSS 6.9 Medium · Not analysed yet · Published 22 Mar 2026 · Tags: CWE-226
- [MediaMonkey 4.1.23 Denial of Service via Malformed URL](https://agentprime.io/advisories/CVE-2019-25571.md)
  `CVE-2019-25571` · CVE record: Mediamonkey MediaMonkey · CVSS 6.9 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-226
- [PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation](https://agentprime.io/advisories/CVE-2019-25563.md)
  `CVE-2019-25563` · CVE record: Uvnc PCHelpWareV2 · CVSS 6.9 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-226
- [Lyric Video Creator 2.1 Denial of Service via MP3 File](https://agentprime.io/advisories/CVE-2019-25560.md)
  `CVE-2019-25560` · CVE record: Lyricvideocreator Lyric Video Creator · CVSS 8.7 High · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-226
- [CEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image](https://agentprime.io/advisories/CVE-2019-25553.md)
  `CVE-2019-25553` · CVE record: Cewe-Photoworld CEWE PHOTO IMPORTER · CVSS 6.9 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-226
- [Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows](https://agentprime.io/advisories/CVE-2025-13108.md)
  `CVE-2025-13108` · CVE record: IBM DB2 Merge Backup for Linux, UNIX and Windows · CVSS 5.5 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: CWE-226
- [In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareabili…](https://agentprime.io/advisories/CVE-2025-0647.md)
  `CVE-2025-0647` · CVE record: Arm Neoverse-N2 and 4 more · CVSS 7.9 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-226
- [NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…](https://agentprime.io/advisories/CVE-2025-33200.md)
  `CVE-2025-33200` · CVE record: NVIDIA DGX Spark · CVSS 2.3 Low · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-226
- [NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…](https://agentprime.io/advisories/CVE-2025-33198.md)
  `CVE-2025-33198` · CVE record: NVIDIA DGX Spark · CVSS 3.3 Low · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-226
- [NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…](https://agentprime.io/advisories/CVE-2025-33196.md)
  `CVE-2025-33196` · CVE record: NVIDIA DGX Spark · CVSS 4.4 Medium · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-226
- [Intel(R) NPU Drivers for Windows: Sensitive information uncleared in resource before release for reuse for some Intel(R)…](https://agentprime.io/advisories/CVE-2025-20622.md)
  `CVE-2025-20622` · CVE record: Intel(R) NPU Drivers for Windows · CVSS 2.0 Low · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-226
- [Untargeted information leak in Bolt protocol handshake](https://agentprime.io/advisories/CVE-2025-11602.md)
  `CVE-2025-11602` · CVE record: neo4j Enterprise Edition and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-226
- [Lack of buffer clearing before reuse may result in incorrect system behavior.](https://agentprime.io/advisories/CVE-2025-2522.md)
  `CVE-2025-2522` · CVE record: Honeywell C300 PCNT02 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-226
- [wire-webapp has no database deletion on client logout](https://agentprime.io/advisories/CVE-2025-48066.md)
  `CVE-2025-48066` · CVE record: wireapp wire-webapp · CVSS 6.0 Medium · Not analysed yet · Published 22 May 2025 · Tags: CWE-226
- [Intel(R) TDX Seamldr module software: Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr…](https://agentprime.io/advisories/CVE-2024-21850.md)
  `CVE-2024-21850` · CVE record: Intel(R) TDX Seamldr module software · CVSS 8.3 High · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-226
- [CMSE secure state may leak from stack to floating-point registers](https://agentprime.io/advisories/CVE-2024-7883.md)
  `CVE-2024-7883` · CVE record: Arm Ltd Arm Compiler for Embedded and 4 more · CVSS 3.7 Low · Not analysed yet · Published 31 Oct 2024 · Tags: CWE-226
- [Moodle HTTP authorization header is preserved between "emulated redirects"](https://agentprime.io/advisories/GHSA-p2cj-86v4-7782.md)
  `GHSA-p2cj-86v4-7782`, `BIT-moodle-2024-38275`, `CVE-2024-38275`, `PKSA-g3r1-2nj3-qn37` · Packagist `moodle/moodle`: affected `<4.1.11 || >=4.2.0-beta, <4.2.8 || >=4.3.0-beta, <4.3.5 || >=4.4.0-beta, <4.4.1`, fixed in `4.1.11`, `4.2.8`, `4.3.5`, `4.4.1` · CVSS 7.5 High · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-226, CWE-459
- [SixLabors.ImageSharp vulnerable to data leakage](https://agentprime.io/advisories/GHSA-5x7m-6737-26cr.md)
  `GHSA-5x7m-6737-26cr`, `CVE-2024-32036` · NuGet `SixLabors.ImageSharp`: affected `<2.1.8 || >=3.0.0, <3.1.4`, fixed in `2.1.8`, `3.1.4` · CVSS 5.3 Medium · Not analysed yet · Published 15 Apr 2024 · Tags: CWE-212, CWE-226
- [Improper privilege management in AppsAnywhere Client](https://agentprime.io/advisories/CVE-2023-41138.md)
  `CVE-2023-41138` · CVE record: AppsAnywhere AppsAnywhere Client · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2023 · Tags: Privilege escalation, CWE-226
- [A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne.](https://agentprime.io/advisories/CVE-2023-3006.md)
  `CVE-2023-3006` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-226
- [Kernel: A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of…](https://agentprime.io/advisories/CVE-2023-1637.md)
  `CVE-2023-1637` · CVE record: Kernel · CVSS 5.5 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-226
- [Bug in pooling instance allocator](https://agentprime.io/advisories/GHSA-wh6w-3828-g9qf.md)
  `GHSA-wh6w-3828-g9qf`, `CVE-2022-39393`, `RUSTSEC-2022-0075`, `RUSTSEC-2022-0098` · crates.io `wasmtime`: affected `>=0.0.0-0, <1.0.2 || >=2.0.0, <2.0.2`, fixed in `1.0.2`, `2.0.2` · CVSS 8.6 High · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-226
- [Duplicate Advisory: \`#\[zeroize(drop)\]\` doesn't implement \`Drop\` for \`enum\`s](https://agentprime.io/advisories/GHSA-r45x-ghr2-qjxc.md)
  `GHSA-r45x-ghr2-qjxc` · crates.io `zeroize_derive`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 17 Jun 2022 · Tags: CWE-226
- [Buffer not correctly recycled in Gzip Request inflation](https://agentprime.io/advisories/GHSA-86wm-rrjm-8wh8.md)
  `GHSA-86wm-rrjm-8wh8`, `BIT-kafka-2020-27218`, `BIT-spark-2020-27218`, `CVE-2020-27218` · Maven `org.eclipse.jetty:jetty-server`: affected `>=9.4.0, <9.4.35.v20201120`, fixed in `9.4.35.v20201120` · CVSS 4.8 Medium · Not analysed yet · Published 2 Dec 2020 · Tags: CWE-226
- [Information Disclosure in GlobalProtect Agent](https://agentprime.io/advisories/CVE-2019-1573.md)
  `CVE-2019-1573` · CVE record: Palo Alto Networks GlobalProtect Agent · CVSS 2.5 Low · Not analysed yet · Published 9 Apr 2019 · Tags: CWE-226
- [Node.js: In all versions of Node.js 10 prior to 10.9.0…](https://agentprime.io/advisories/CVE-2018-7166.md)
  `CVE-2018-7166` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 21 Aug 2018 · Tags: CWE-226

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-226>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-226/>. Everything for agents: <https://agentprime.io/llms.txt>.